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Please delete Claim 7. 



Please amend claim 13 to read as follows: 



ClainI J^(amended). In a local area network attached to a wide area network, a method for 
improving the security of the local area network, comprising: 

monitoring communications between the local area network and the wide area network; 
Qf^ determining, over time, if the communications between the local area network and the wide 

area network contain patterns of activity indicative of an attempted security breach; and 

generally simultaneously controlling a firewall to selectively block communications between 
the local area network and the wide area network depending upon a classification of the attempted 
security breach. 



Please amend claim 21 to read as follows: 



Claim 21 (amended). A computer program product which includes codes on a compiit^ readable 
medium wherein codes are being executed by a computer system, [comprising a/^mputer usable 
medium having a computer readable code embodied thereon configured to qperate on a computer,] 
comprising: 

a detect code operation performed by the codes on the compu ter readable medium wherein 
known improper code is detected; and X 

a detect patterns operational routine performed by the jgodes on the compter readable medium 
wherein a pattern of activity is detected over time. 

I^ease amend claim 22 to read as follows^ 

Claim 22 (amended). The computer E^ogram product of claTim 21 , and fifrther including: 

a weighting operation performed >^ the codes on the computer read^le medivim wherein a 
weight is assigned to a detected security breach. 

fpiease amend claim 23 to read^ follows^) 

Claim 23 (amended). / The computer program product of claim 21, wherein: 

a firewall is autc^natically reprogrammed by the codes on the computer readable medium . 
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(Please amend claim 24 to read as follows:^ 
Claim 24 (amended). A computer program product which includes codes oii a computer 
readable medium wherein codes are being executed by a computer system, [compnsing a computer 
usable medium having a computer readable code embodied thereon configjt^ed to operate on a 
computer,] comprising; 

at least one detect operation performed by the codes on the compute/^readable medixim wherein 
a computer security breach is detected; and 

a weighting operation performed by the codes on the computer readable medium wherein a 
weight is assigned according to the importance of the security ^each. 

^Please amend claim 25 to read as followsp 

Claim 25 (amended). The computer program pr6duct of claim 24, and further including: 
a react operation performed by the codes on the computer readable medium wherein a firewall 

is reprogrammed in real time to react to the secynty breach, 
( ple ase amend claim 26 to read as follows: 



Claim 26 (amended). 



readable medium wherein codes are being executed b 




A computer program product whichincmdes codes on a computer 



a computer system, [comprising a computer 



usable medium having a compu)er readable code erpbodied thereon configured to operate on a 
computer,] comprising: 

at least one detect operation performed by the codes on the computer readable medium wherein 
a computer security breacm is detected; and 

a react operation /performed by the codes on the computer readable medium wherein a firewall 
is reprogrammed in/real time to react to the security breach [;]. 



REMARKS 

These remarks are in response to the Office Action dated 8/12/99, which has a shortened 
statutory period set to expire 1 1/12/1999. A one-month extension, to expire 12/13/1999 
(12/12/99 being a Sunday), is requested in a petition filed herewith. 
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